Secure SME backup to a NFS/SSH-accessible NAS

I've got a WD Mycloud EX4100 NAS, which provides some "plain" (ie no kerb5 encryption) NFS. It also provides SSH access and has rsync installed. This NAS is not on my location, so my problem is to avoid eavesdropping when backing up my SME box?

AFAIK, the built-in backup functionality does not provide any way to encrypt the files. If it did, I would backup via NFS.

Any idea on what could be used here? Something that could utilise SSH (and rsync perhaps) for the transfer?

If Affa looks like overkill, or the remote NAS does not support hardlinks, or if you want to roll your own, you can get a list of the files and folders that SME includes by default when it does a restore:

perl -e 'use esmith::Backup;$b=new esmith::Backup;print join("\n",$b->restore_list)."\n"' If you need the data to be encrypted at rest on the remote NAS you may want to create encrypted backup files locally then send those to the remote NAS.